Malicious
Malicious

3742ad85877e2c70bb25b59b0c38434a

VBScript
MD5: 3742ad85877e2c70bb25b59b0c38434a
Size: 38.4 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 3742ad85877e2c70bb25b59b0c38434a
Sha1 472759fc8cd4edcbf29dff9abb209ba9e8fe1b4b
Sha256 48dbf74443280fa3f68e0cb00c2c482f5692428b56c95f44ee0246aab27e3cd6
Sha384 5bfd707b13336cc8f78c2abcc5bba57f36eeddfdbacbb64ab46c3ea50042068f48f046eb513132e2bcfd814483750ccf
Sha512 50acb292a18603572ad836e4433fb55a35dd2162dee92171a0a99cad2484a9e08fecf9afdffadcbe692fab9baf2dc87ff0306c25d853e0c3d6d2f9b38947e67b
SSDeep 192:r3w87eSepeVcww2eIoNoeMQwoejcJWULyoTwewXedG:r3F7LIqc12hoNovQD4cIULyoTdgAG
TLSH 4D031B77C1885CD7846640BACC1EEEFA3007099E100105B8FDEE1DE5732B16B5A7ABAD
3742ad85877e2c70bb25b59b0c38434a
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Base64-Block]
[Base64-Block@0x000074B5]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 2secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:vbs>scr:ps1~T1027~T1059.001>scr:ps1~T1027~T1059.001
Shape scr:vbs>scr:ps1>scr:ps1
malicious 3 nodes
Path scr:vbs>enc:b64
Shape scr:vbs>enc:b64
2 nodes
3742ad85877e2c70bb25b59b0c38434a
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Base64-Block]
[Base64-Block@0x000074B5]
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙